42 matches found
CVE-2024-55503
CVE-2024-55503 Termius ऐप MacOS dylib कमांड इंजेक्शन विवरण v.9.9.0 से पहले Termius में एक समस्या एक स्थानीय हमलावर को DYLDINSERTLIBRARIES घटक में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। dylib का उपयोग करके root@kitploit:...
CVE-2024-55504
CVE-2024-55504 RAR Extractor - Unarchiver Free 및 Pro v.6.4.0의 문제로, 로컬 공격자가 MacOS에서 exploitcombined.dylib 컴포넌트를 통해 임의 코드를 주입하여 잠재적으로 원격 제어 및 민감한 사용자 데이터에 대한 무단 액세스로 이어질 수 있습니다. 재현 터미널에서 root@kitploit: DYLDINSERTLIBRARIES=exploitcombined.dylib /Applications/RAR\ Extractor\ -\ Unarchiver...
CVE-2024-53407
CVE-2024-53407 Dans Phiewer 4.1.0, une injection de dylib conduit à une exécution de commande, permettant aux attaquants d'injecter un fichier .dylib, ce qui peut entraîner un contrôle à distance et un accès non autorisé à des données utilisateur sensibles sous macOS. Reproduction utilisez le...
CVE-2023-49313
CVE-2023-49313 XMachOViewer 0.04의 dylib 주입 취약점으로 인해 공격자가 무결성을 손상시킬 수 있습니다. 이를 악용하면 제품의 프로세스에 무단 코드가 주입되어 원격 제어 및 민감한 사용자 데이터에 대한 무단 액세스로 이어질 수 있습니다. macOS용 휴대용 버전 먼저 dylib을 작성합니다. root@kitploit: include include attributeconstructor static void pocvoid printf"Malicious Dylib Inserted"; 컴파일합니다. gcc...
HookCase
HookCase HookCase è uno strumento per il debug e il reverse engineering di applicazioni su macOS noto anche come OS X e del sistema operativo stesso. Reimplementa ed estende la funzionalità DYLDINSERTLIBRARIES di Apple. Può essere utilizzato per hookare qualsiasi metodo in qualsiasi modulo anche...
memdumper
memdumper memdumper legge la memoria di un processo macOS in esecuzione avvalendosi dell'entitlement debugger di un altro binario firmato. L'obiettivo è che taskforpid e ptrace vengano eseguiti come quel binario autorizzato, così un EDR registra quello piuttosto che memdumper. di cenobyte...
DylibHijackTest
DylibHijackTest Requisiti Installare i requisiti Python3: pip3 install -r requirements.txt Compilare la dylib dal sorgente perché non ci si fida delle cose compilate prese da GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib Come Funziona ⚠️ Questo genererà molti processi sulla tu...
EUVD-2023-30610
Malicious code in bioql PyPI...
EUVD-2024-52779
Malicious code in bioql PyPI...
CVE-2024-55950
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds...
CVE-2024-55950
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds...
CVE-2024-55950
Tabby (formerly Terminus) prior to version 1.0.216 is affected by a vulnerability caused by overly permissive entitlements that enable dangerous capabilities (camera, microphone, and access to personal folders) through Apple Events, plus entitlements that can permit code injection. The root cause...
CVE-2024-55950 Tabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby
Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds...
CVE-2024-45599
CVE-2024-45599 affects Cursor prior to 0.41.0 on macOS. If a user has granted Cursor access to the camera or microphone, an attacker could leverage a DyLib Injection via the DYLD_INSERT_LIBRARIES environment variable to allow any running program on the machine to access those peripherals, bypassi...
CVE-2024-37885
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...
CVE-2024-37885
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...
CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...
CVE-2024-37885
CVE-2024-37885 concerns the Nextcloud Desktop Client for macOS. A code injection vulnerability allows loading arbitrary code when the client is launched with the environment variable DYLD_INSERT_LIBRARIES set, as reported for versions prior to 3.12.0. The issue stems from how the macOS client han...
CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...